Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 04:14
General
-
Target
b09a8639b204d9529a6630b05962c7d4fb713d2fed400f6c963875cb61da025b.exe
-
Size
14.0MB
-
MD5
6f8c143000dc692a2328e41ba6d62326
-
SHA1
4b93f517528b8bc415780e98de7b6dbe8e2eb61e
-
SHA256
b09a8639b204d9529a6630b05962c7d4fb713d2fed400f6c963875cb61da025b
-
SHA512
7b17ca65744d0e7de7bb4df23e254463c688d905e3e02b531891b5383c14482cad4a7efe9112a70240531baf27a40eecb818861bebcac5bd7b0ca2c33592fc99
-
SSDEEP
393216:LmyykPBCLxAxjhX2VZqxxran99FpjA9E4d:Lt5GxAZhmv8rOJjCtd
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 14 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\b09a8639b204d9529a6630b05962c7d4fb713d2fed400f6c963875cb61da025b.exe"C:\Users\Admin\AppData\Local\Temp\b09a8639b204d9529a6630b05962c7d4fb713d2fed400f6c963875cb61da025b.exe"2⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304KB
-
Filesize
7.5MB
-
Filesize
8KB
-
Filesize
25.2MB
-
Filesize
7.5MB
-
Filesize
25.2MB